CVE-2011-2284: Medium severity oracle peoplesoft hrms vulnerability

Published Jul 21, 2011

Updated

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle #17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance.

Affected Software

2 affected components

Oracle PeopleSoft Enterprise HRMS=9.0-bundle17

Oracle PeopleSoft Products=9.0-bundle17

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 21, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2284?

CVE-2011-2284 has not been assigned a specific severity rating but is classified as a potentially serious vulnerability affecting confidentiality.

How do I fix CVE-2011-2284?

The recommended fix for CVE-2011-2284 is to apply the latest security patch provided by Oracle for PeopleSoft Enterprise HRMS 9.0 Bundle #17.

Who is affected by CVE-2011-2284?

CVE-2011-2284 affects remote authenticated users of Oracle PeopleSoft Products 9.0 Bundle #17.

What components are impacted by CVE-2011-2284?

CVE-2011-2284 specifically impacts the ePerformance functionality within the PeopleSoft Enterprise HRMS component.

Is authentication required to exploit CVE-2011-2284?

Yes, CVE-2011-2284 requires that the attacker is a remote authenticated user to potentially affect confidentiality.